On August 4, slow fog released an analysis of Solana attack, and preliminarily screened that 30% of users were stolen because of private key leakage in the sentry service of slope wallet (Android, version: 2.2.2). 60% of the stolen users use phantom wallets, and the reason for their theft has not been identified yet. Slow fog said that if you have any ideas, you are welcome to discuss them togETHer and hope to make a modest contribution to Solana ecology together. The following are specific questions:
1. Is sentry's service collecting mnemonic words from users' wallets a common security problem?
2. If phantom uses sentry, will phantom wallet be affected?
3. What are the reasons why 60% of the stolen users are hacked?
4. Sentry, as a widely used service, is it possible that sentry officials have been invaded? Which leads to the attack of targeted intrusion into the virtual currency ecosystem?
